3585913ea124c92cc67205d589ea7c1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3585913ea124c92cc67205d589ea7c1a_JaffaCakes118
Size

479KB
MD5

3585913ea124c92cc67205d589ea7c1a
SHA1

82dec9e592e7792172c046055c16d3a94633effb
SHA256

d7680a4b8b3c0f87c6c74d49c31ed5fcd1ebacf1547671da2538251a11d0c7ad
SHA512

aad794d170fa9b0b12a81aa6e51d9a72733bffed13af6e1714690509e97823fc2628f4cbdc936f9fca83429a13cce13dac50fdfed992b3bc23b65f1760623ddb
SSDEEP

12288:efqnHVHe6n16SuFs2iIau+yUD8xUzdpztlg86ZwYWH8PBSLZznM4lDe8:YWHLU1iy6D8xCvnM4te

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3585913ea124c92cc67205d589ea7c1a_JaffaCakes118

Files

3585913ea124c92cc67205d589ea7c1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ